CVE-2022-49368

HIGH Year: 2022
CVSS v3 Score
7.1
High
Weakness Type
CWE-125
View all →

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() The "fsp->location" variable comes from user via ethtool_get_rxnfc(). Check that it is valid to prevent an out of bounds read.

Related Vulnerabilities

CVE-2015-8743

HIGH
CVSS:7.1(High)

QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing 'ioport' r/w operations. A privileged (CAP_SYS_RAWIO)...

CWE-1252015

CVE-2016-10165

HIGH
CVSS:7.1(High)

The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which t...

CWE-1252016

CVE-2016-4682

HIGH
CVSS:7.1(High)

An issue was discovered in certain Apple products. macOS before 10.12 is affected. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain se...

CWE-1252016

CVE-2016-4773

HIGH
CVSS:7.1(High)

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds re...

CWE-1252016

CVE-2016-4774

HIGH
CVSS:7.1(High)

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds re...

CWE-1252016

CVE-2016-4776

HIGH
CVSS:7.1(High)

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds re...

CWE-1252016